Privacy
Privacy Policy
Your privacy matters to us, and your reference photograph is handled with particular care. This policy explains what we collect, why, and the rights you have.
Who we are
This website and studio are operated by Mainos21 Oy (Ohtonen Studio), business ID 2347006-4, VAT FI23470064, Pihkapolku 13, 87500 Kajaani, Finland ("we", "the studio"). We are the controller of your personal data. Contact: hello@ohtonenstudio.com.
What we collect
- Order and contact details: your name, email, shipping address, and order information.
- Payment information: processed by Stripe. We do not store your full card details.
- Your reference photograph: handled separately and with special care. See Your Photograph.
- Basic website analytics and cookies. See our Cookie notice.
Why we use it, and the legal basis
- To make and deliver your order (performance of a contract).
- To handle your reference photograph (your explicit consent, given at checkout).
- To meet accounting and tax obligations (legal obligation).
- To answer your messages and improve the studio (legitimate interest).
Your reference photograph
Your photograph is never stored on this website. It is uploaded through a private, encrypted link straight to private storage located in the EU, held by our storage processor under a data processing agreement. It is given a randomised name, is accessible only to the artist through an authenticated system, is never shown, shared or sold, and is automatically deleted on a short retention schedule of about 30 days once your piece is complete.
Who we share data with
Only those who help fulfil your order: Stripe (payment), our shipping carrier, and our private storage provider. We never sell your data, and we never share it for advertising.
How long we keep it
Order and billing records are kept as long as accounting and tax law requires. Your reference photograph is deleted on the short retention schedule above. Everything else is kept only as long as needed.
International transfers
Your data is processed in the EU wherever possible. Where a provider processes data outside the EU, we rely on appropriate safeguards required by law.
Your rights
You may ask to access, correct, delete, or receive a copy of your data, or object to certain processing. Contact hello@ohtonenstudio.com. You also have the right to complain to the Office of the Data Protection Ombudsman (Finland).
Age
The studio and its products are for adults only.
Changes
We may update this policy. The current version is always on this page.
